## Password Rules

Each user will have a unique User ID and Password.

RMS Password validation enforces defined policy configuration that align with the FBI CJIS Security Policy Basic Password Standard. It is recommended that agencies also implement a departmental policy for end-user password compliance.

| • | After initial log-in you will be prompted to set up security questions.

| • | Passwords are not displayed on entry.

| • | Passwords are encrypted for storage and transmission.

| • | Passwords expire every ninety (90) days.

| - | This option is configurable at the schema level for sites requiring expiration days different than the default configuration. Contact Caliber Support for assistance in updating this configuration setting.

| • | Change password using the following rules:

| - | Minimum length shall be eight (8) characters. This option is configurable at the schema level for sites requiring a minimum length different than the default configuration. Agency admins should contact Caliber Support for assistance in updating this configuration setting.

| - | It shall be case sensitive.

| - | It shall be alphanumeric and allow for special character.

| - | It shall contain one lower case letter, one capital letter, and one number.

| - | It shall not be the same as the User ID.

| - | Passwords are on a default rotation of ten (10) passwords. Passwords must cycle through ten passwords before re-use. This option is configurable at the schema level for sites requiring a rotation different than the default configuration. Agency admins should contact Caliber Support for assistance in updating this configuration setting.

Notes:

| 1. | By default, you will have three (3) attempts to enter a correct password. After these attempts have been exhausted, you will be prompted to reset your password. If you are unable to reset your password using the above methods, you will need to contact your agency administrator.

| – | This option is configurable at the schema level for sites requiring unsuccessful login attempts different than the default configuration. Agency admins should contact Caliber Support for assistance in updating this value.

| 2. | Advance Authentication options are available. Agency admins should contact Caliber Support for more information.